SUBPROCESSORS & INTERNATIONAL TRANSFERS
ReggaeVerse OS uses a small number of vetted providers to run ReggaeVerse OS. This page names each of them, what they process, where they process it and the legal mechanism we rely on when data leaves the UK/EEA.
Last updated 29 July 2026 · ReggaeVerse OS
1. CURRENT SUBPROCESSORS
| Provider | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Supabase (database, authentication, storage) | Hosting the platform database, accounts, sessions and uploaded files | Account, profile, content, transaction and security data | EU / United States | Standard Contractual Clauses + UK Addendum |
| Cloudflare, Inc. | Application hosting, content delivery, DDoS and abuse protection | IP address, request and log data | Global edge network (incl. United States) | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Paddle.com Market Ltd (Merchant of Record) | Payments, subscriptions, tax, invoicing, refunds and chargebacks | Name, email, billing country, payment and order data | United Kingdom / EU / United States | UK adequacy and Standard Contractual Clauses |
| Google LLC (AI model serving via our AI gateway) | Generating AI Studio and Intelligence outputs from your prompts | Prompts and generated outputs (no account credentials) | United States | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Resend / email delivery provider | Transactional and opted-in email from notify.reggaeverseos.com | Email address, message content and delivery events | EU / United States | Standard Contractual Clauses + UK Addendum |
2. FONTS AND THIRD-PARTY ASSETS
All fonts are served from our own domain. We do not load Google Fonts, third-party advertising or cross-site tracking scripts, so no personal data (including your IP address) is shared with a font or advertising network when you browse the platform.
3. TRANSFER SAFEGUARDS
Where a provider processes personal data outside the UK/EEA we rely on an adequacy decision, the EU-US Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum. In every case we apply supplementary measures including encryption in transit and at rest, least-privilege credentials and data minimisation. You can request a copy of the safeguards in place by emailing privacy@reggaeverseos.com.
4. CHANGES TO THIS LIST
We update this page whenever we add or replace a subprocessor, and we give notice of material changes in advance where required. See the Privacy Notice and Cookie Notice for the wider picture.